copilot-pr-autopilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via GitHub PR review thread bodies/comments authored by non-operators (e.g., humans/bots) fetched at runtime by scripts/03-list-open-threads.ps1 (comments(first:1){... body ...}) and then passed through the loop into step 4 triage and step 8 reply drafting.